_�����ӳ���
Static task
static1
Behavioral task
behavioral1
Sample
310c5d92bfe37719b7d5ae4a1acb79c6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
310c5d92bfe37719b7d5ae4a1acb79c6_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
310c5d92bfe37719b7d5ae4a1acb79c6_JaffaCakes118
-
Size
1.8MB
-
MD5
310c5d92bfe37719b7d5ae4a1acb79c6
-
SHA1
e221780c8e8becbc1bbbfa109e97f4bc8ec06fc6
-
SHA256
296c3bf4cf6b3898cab3568f9d50b8402db728b74e2b5cdf47b38f709e448daf
-
SHA512
b2a807520dffbb4905fe1c591c6073b94369bad8e656d7292bad93af6e7debb1c82e80ad6901cce4e85251f1cd744b8d8acda3eee6f28043e4bbe3176418e4c8
-
SSDEEP
24576:Jxx4GzVvu9BrHr6AHntfN7kmGaR3C+k5qTJ8S66aR2LrV8npUzn2EFvzQ9d6f6f3:JPFZQBrLrN8aKR2LMMn2EW9dC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310c5d92bfe37719b7d5ae4a1acb79c6_JaffaCakes118
Files
-
310c5d92bfe37719b7d5ae4a1acb79c6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
MD13TslI Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Qf4cacB6 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yJDYkyIm Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tt1FheUF Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xZDJPiwT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eBhGqUpF Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
o2jN2NDn Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ